Cybrary ForgeCYBRARY / FORGE

Cloud CLI (aws-compatible)

v2.15.30Range control plane

An aws-CLI-compatible client for the range's simulated control plane. Reads caller identity, IAM users and roles, access keys, buckets, instances, secrets and the audit trail — the same estate the Cloud Console shows, so CLI enumeration and console review agree.

Category
Discovery & reconnaissance
Package
awscli
Runs on
Linux · Windows
Commands
aws

Every call is answered from the authored cloud estate. No AWS endpoint is contacted and no credential is real.

Install it

The scripts below install the real Range control plane package on your own machine — read them first, and run them somewhere you are allowed to change. Inside the range, one press puts the simulated package on your next machine.

Linux installer (shell script)
install-awscli.sh
Windows installer (PowerShell)
Install-awscli.ps1
On a range machine
Add it to your kit and every machine you launch comes with it.

On Linux

Debian, Ubuntu, Kali (apt)

  1. Refresh the package lists
    sudo apt update
  2. Install Cloud CLI (aws-compatible)
    sudo apt install -y awscli

RHEL, Fedora (dnf)

  1. Install Cloud CLI (aws-compatible)
    sudo dnf install -y awscli

    Package names drift between distributions; search first if this one misses.

Arch (pacman)

  1. Install Cloud CLI (aws-compatible)
    sudo pacman -S --noconfirm awscli

Alpine (apk)

  1. Install Cloud CLI (aws-compatible)
    sudo apk add awscli

    Package names drift between distributions; search first if this one misses.

Check it worked

  1. Confirm it landed on PATH
    which aws
  2. Check the version
    aws --version

    The range reports 2.15.30.

Remove it

  1. Take it off again
    sudo apt remove --purge awscli

On Windows

Windows Package Manager (winget)

  1. Search the catalog
    winget search awscli
  2. Install Cloud CLI (aws-compatible)
    winget install --id awscli -e

    Package names drift between distributions; search first if this one misses.

Chocolatey (choco)

  1. Install Cloud CLI (aws-compatible)
    choco install awscli -y

    Run the shell as administrator.

Check it worked

  1. Confirm it resolves
    where aws
  2. Check the version
    aws --version

    The range reports 2.15.30.

Remove it

  1. Take it off again
    winget uninstall --id awscli

Inside the range

  1. Tick it on the launch screen

    Under Cloud CLI (aws-compatible)'s category on the advanced tool shelf. A lab that depends on it locks the toggle on and says why.

  2. Or install it from a range terminal
    sudo apt install -y awscli

    The simulated package manager seeds the same binaries, config and receipt the shelf toggle does.

  3. Everything here is simulated

    No software is downloaded and nothing executes — the range answers from authored fixtures.

Labs that use Cloud CLI (aws-compatible)

  • Pentest: Cloud Privilege EscalationGiven an access key with s3:GetObject only, walk a chain of over-permissive roles and trust policies to end up in a shell on a build server. File the trust-policy finding — the fix is one JSON edit.